PaloAltoNetworks / pan-cortex-data-lake-pythonLinks
Python idiomatic SDK for Cortex™ Data Lake.
☆48Updated 10 months ago
Alternatives and similar repositories for pan-cortex-data-lake-python
Users that are interested in pan-cortex-data-lake-python are comparing it to the libraries listed below
Sorting:
- Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint sec…☆108Updated last year
- Coding examples for the OpenDNS Investigate API☆24Updated 6 years ago
- Ansible playbook for installing MineMeld on Linux☆48Updated 4 years ago
- Engine of MineMeld☆141Updated 2 years ago
- Tools for security content automation, baseline tailoring, and overlay development.☆45Updated last year
- Subscribe to raw VMware Carbon Black EDR event feed and forward to another system, such as Splunk.☆73Updated last year
- WebUI of MineMeld☆43Updated 2 years ago
- Palo Alto Networks Rule Parser☆16Updated 9 years ago
- A python script to shift the timestamp on syslog data. Useful for forensicators combating time skew.☆21Updated 3 years ago
- ansible role to setup MISP, Malware Information Sharing Platform & Threat Sharing☆55Updated 2 weeks ago
- MineMeld nodes for MISP☆19Updated 2 years ago
- Python module to interface with the OpenDNS Investigate API☆64Updated 3 years ago
- The Palo Alto Networks Add-on for Splunk allows a Splunk® Enterprise or Splunk Cloud administrator to collect data from Palo Alto Network…☆21Updated 5 years ago
- A collection of notebooks built for defensive and offensive operations.☆77Updated 5 years ago
- Apps for Splunk Phantom security automation | Cisco Meraki | Ansible Tower | F5 | A10☆24Updated 5 years ago
- A tool for bulk URL queries against Palo Alto Networks' PAN-DB cloud database☆18Updated 2 years ago
- Report Generation from the Carbon Black REST API☆15Updated 3 years ago
- Prototypes for MineMeld nodes☆39Updated 4 years ago
- Build Automated Machine Images for MISP☆29Updated 2 years ago
- Official Palo Alto Networks MineMeld docker☆17Updated 5 years ago
- Tools to assist in forensicating docker☆86Updated 11 months ago
- This is a script to import Cisco Talos's IP Blacklist into a Tag (Host Group) within Stealthwatch. This will also optionally create a Cu…☆11Updated 2 years ago
- Salt States for Configuring the SIFT Workstation☆107Updated 2 weeks ago
- Sysmon Splunk App☆47Updated 7 years ago
- InvestigationPlaybookSpec☆71Updated 8 years ago
- Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber☆76Updated 9 years ago
- Cyber Analytics Platform and Examination System (CAPES) Project Page☆60Updated 6 years ago
- Palo Alto powershell☆40Updated 3 years ago
- Carbon Black API - Python language bindings☆145Updated last year
- Network Forensics Bro scripts & pcap samples☆63Updated 11 years ago